Privacy Policy

Last Updated: 22.01.2026

deal-it is provided by blinzl UG (haftungsbeschränkt) (“we,” “our,” or “us”). We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR).

1. Controller (Verantwortlicher)

The data controller responsible for this application is:

blinzl UG (haftungsbeschränkt)
(For full address and legal representatives, please see our Imprint/Impressum)

2. Information We Collect

We prioritize data minimization. We do not collect your email address, phone number, or real name during the signup process. However, to provide the service, we collect the following:

A. Account Credentials (Pseudonymized)

• Data: A randomly generated User ID and internal token.
• Purpose: To maintain your game state, inventory, and subscription status across sessions.
• Legal Basis: Performance of a Contract (Art. 6(1)(b) GDPR).

B. User-Generated Content

• Chat Data: Text messages you send to the AI trading partner.
• Leaderboard Name: A visible nickname you voluntarily choose.
• Purpose: To provide the core gameplay and AI interaction.
• Legal Basis: Performance of a Contract (Art. 6(1)(b) GDPR) and Legitimate Interest (Art. 6(1)(f) GDPR).

C. Device and Usage Data

• Data: Device model, OS version, general location (country/region), and in-app actions (analytics).
• Purpose: To ensure app compatibility, fix bugs, and improve user experience.
• Legal Basis: Legitimate Interest (Art. 6(1)(f) GDPR). Our interest is the stability and improvement of our App.

D. Purchase Information

• Data: An anonymous Subscriber ID and transaction receipt. We do not process or store credit card details.
• Purpose: To validate subscriptions and unlock premium content.
• Legal Basis: Performance of a Contract (Art. 6(1)(b) GDPR).

3. Third-Party Services & Data Transfer

We utilize third-party services to operate the App. Some of these providers are located outside the European Economic Area (EEA), specifically in the USA. We ensure that these transfers are protected by appropriate safeguards (e.g., Data Privacy Framework or Standard Contractual Clauses).

A. AI Processing: Google Vertex (Google LLC)

• Function: Generates AI responses.
• Data Shared: Chat text inputs.
• Privacy Note: Google states that API data is not used to train their models.
• Location: USA.

B. Analytics: PostHog

• Function: Analyzing user behavior to improve the game.
• Data Shared: Pseudonymous User ID, device specs, in-app actions.
• Location: EU.

C. Infrastructure: Expo

• Function: Over-the-air updates and push notifications.
• Data Shared: Expo Push Token.
• Location: USA.

D. Payments: RevenueCat

• Function: Managing subscription infrastructure.
• Data Shared: App Store Transaction IDs and anonymous App User ID.
• Location: USA.

4. Data Retention and Deletion

A. Retention

We retain your account data (inventory, chat history, score) for as long as you use the App.

B. Account Deletion

You have the right to delete your account and all associated data at any time. Since we do not collect email addresses, we cannot verify your identity via email requests. You must initiate deletion directly through the App.

How to delete: Navigate to Settings > Delete Account within the App.

5. Your Rights (GDPR)

Under the GDPR, you have the following rights regarding your personal data:

• Right of Access: You can request information about the data we hold about you.
• Right to Rectification: You can correct your Leaderboard name within the App.
• Right to Erasure: You can delete your data via the App settings.
• Right to Restriction & Objection: You may object to the processing of your data based on legitimate interests.
• Right to Data Portability: You have the right to contact us for a structured export of your data.
• Right to Lodge a Complaint: You have the right to complain to a Data Protection Authority (Datenschutzbehörde) if you believe we are mishandling your data.

To exercise these rights (other than deletion, which is done in-app), please contact: support@deal-it.com.

Important: Since we do not verify identities via email, we may require you to provide your specific User ID from the app settings to locate your data. Please send us a support mail via the “Contact Support” button in the app settings to simplify this process.

6. Push Notifications

We may send you push notifications regarding game activity. You can opt-out at any time in your device settings.

7. Children’s Privacy

Our Service is not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that a child has provided us with Personal Data, we will take steps to delete such information.

8. Changes to This Policy

We may update our Privacy Policy from time to time. Because we do not store contact information to notify you individually, we will notify you of any changes by posting the new Privacy Policy on this page.